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DETAILED ACTION 

1 . A Request for Continued Examination under 37 CFR 1.114, including the fee set fortli in 37 CFR 
1 .17(e), was filed in this application after final rejection. Since this application is eligible for 
continued examination under 37 CFR 1 .1 14, and the fee set forth in 37 CFR 1 .17(e) has been 
timely paid, the finality of the previous office action has been withdrawn pursuant to 37 CFR 
1.114. Applicant's submission filed on 8 February 2008 has been entered. 

2. Claims 1 , 2 and 4 have been amended. Claims 6-20 have been canceled. No new claims 
have been added. Claims 1-5 are currently pending in the present application. 

3. Applicant's amendments and argument have been fully considered, but are moot in view of new 
ground rejection as set forth below. It is noted that Applicant's arguments are directed towards limitations 
newly added via amendments. 

4. Any objection/rejection not repeated below is withdrawn due to Applicant's amendment. 

Claim Rejections - 35 USC § 102 

5. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis for 
the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on sale in this 
country, more than one year prior to the date of application for patent in the United States. 

6. Claims 1-3 and 5 are rejected under 35 U.S.C. 102(b) as being anticipated by Kelley et al. (U.S. 
Patent No. 6,000,033) 
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As per claim 1, Kelley et al. discloses a method ("...providing passwords from a client computer to 
different servers, database and applications and other services accessed on and inter- or intra-net" - 
e.g. col. 3, lines 55-57), comprising: 

determining whether a first password ("...a first virtual password "xyz"..." - e.g. col. 7, lines 3-9 and 
"A second virtual password "rst"..." - e.g. col. 7, lines 9-15. Please note a first virtual password or a 
second virtual password correspond to Applicant's a first password) is restricted to a set of pages ("Also, 
within the context of virtual password control, the ability to allow for different security levels is provided with 
this invention. What this means is that a subset of our web client access can be shared with someone 
without giving that person access to all of the servers, data base and applications. The user can be given 
a restricted universal password which would allow only access to certain servers, data bases and 
application" - e.g. col. 5, lines 24-31) wherein the determining further comprises in response to each of the 
pages in the set being retrieved from a server ( "Web sites, applications or files 26, 28 have different 
addresses (URLs) different real passwords, and are accessible over network cable 24 through network 
server 18. ..The computer program or software incorporating the process steps. ..may be stored in both the 
client computer(s) and network server..." - e.g. col. 6, lines 20-39 and "Table 1...Such table may be located 
in the client computer database to control access to the listed services..." - e.g. col. 6, lines 40-64; "...This 
first group of users would not have access to the database and spreadsheet services... This second group 
of users would not have access to the subscription web site service" - e.g. col. 6, line 65 - col. 7, line 16), 
determining whether at least one of the pages in the set comprises password restriction control information 
that specifies an address of a domain and restriction of password use to within the domain ("Table 1 ...Such 
table may be located in the client computer database to control access to the listed services..." - e.g. col. 6, 
lines 40-64; "...a first virtual password "xyz" is assigned to a first group of the listed services. This first 
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virtual password would be supplied to a first group of users authorized to access the internet connection 
provider and subscription web site services. This first group of users would not have access to the 
database and spreadsheet services. A second virtual password "rst" is assigned to a second group of the 
listed services. This second virtual password would be supplied to a second group of users authorized to 
access the internet connection provider, database and spreadsheet services. This second group of users 
would not have access to the subscription web site service" - e.g. col. 6, line 65 - col. 7, line 16). 

if the first password is restricted to the set of pages, denying submission of the first password 
outside the set of pages, wherein the first password is allowed to be submitted to the server that originated 
the set of pages ("...in the reference table a first virtual password corresponding to a first group of the 
services... and a second virtual password corresponding to a second group of the services. ..The second 
group of the services being different from the first group of the services and the second virtual password is 
different from the first virtual password" - e.g. col. 4, lines 21-28 and "connecting the client computer to a 
desired service listed on the desired group of services in the reference table for access on the inter- or 
intra-net and receiving input of the virtual password corresponding to the desired group of services..." - e.g. 
col. 4, lines 43-48. Please note the first password "xyz" is denied submission to access database and 
spreadsheet, which are outside the set of pages of Internet provider and Subscription and the first 
password "xyz" is allowed only to be submitted to the servers of Internet provider and subscription web 
site); and if the first password is not restricted to the set of pages, allowing submission of the password 
outside the set of pages (e.g. e.g. col. 6, lines 45-64 and col. 7, lines 4-15. Please note from table 1 , the 
first password "rst" is allowed to submit to Internet Provider, Database and Spread sheet. Therefore, the 
first password "rst" is allowed to submit outside set of pages Internet Provider"). 
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As per claim 2, Kelley et al. discloses a metlnod as applied above in claim 1 . Kelley et al. further 
discloses wherein the set of pages comprise all pages within the domain ("Database http://bbb.ddd.CQm " - 
e.g. col. 6, lines 54-56. Please note from this database URL, it comprises all pages within the domain). 

As per claim 3, Kelley et al. discloses a method as applied above in claim 1 . Kelley et al. further 
discloses wherein the set of pages comprises a single page ("...to access... specific HTML web pages 
and other files and applications...." -e.g. col. 6, lines 16-23). 

As per claim 5, Kelley et al. discloses a method as applied above in claim 1 . Kelley et al. further 
discloses denying submission of a second password ("...a first virtual password "xyz"..." - e.g. col. 7, lines 
3-9 and "A second virtual password "rst"..." - e.g. col. 7, lines 9-15. Please note a first virtual password or 
a second virtual password correspond to Applicant's a second password") inside the set of pages that was 
previously used outside the set of pages ("...in the reference table a first virtual password corresponding to 
a first group of the services... and a second virtual password corresponding to a second group of the 
services... The second group of the services being different from the first group of the services and the 
second virtual password is different from the first virtual password" - e.g. col. 4, lines 21-28 and "Any 
number of different virtual passwords may be used to allocate authorized services among different users 
and user groups. The services authorized by each virtual password... may be mutually exclusive with 
other services authorized by other virtual passwords" - e.g. col. 7, lines 41-45). 

Claim Rejections - 35 USC § 103 
7. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness rejections 
set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or deschbed as set forth in section 102 of this 
title, if the differences between the subject matter sought to be patented and the phor art are such that the subject matter as a 
whole would have been obvious at the time the invention was made to a person having ordinary skill in the art to which said 
subject matter pertains. Patentability shall not be negatived by the manner in which the invention was made. 
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8. The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1 , 148 USPQ 459 (1966), that 
are applied for establishing a background for determining obviousness under 35 U.S.C. 103(a) are 
summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating obviousness or 
nonobviousness. 

9. This application currently names joint inventors. In considering patentability of the claims under 35 
U.S.C. 103(a), the examiner presumes that the subject matter of the various claims was commonly owned 
at the time any inventions covered therein were made absent any evidence to the contrary. Applicant is 
advised of the obligation under 37 CFR 1 .56 to point out the inventor and invention dates of each claim that 
was not commonly owned at the time a later invention was made in order for the examiner to consider the 
applicability of 35 U.S.C. 103(c) and potential 35 U.S.C. 102(e), (f) or (g) prior art under 35 U.S.C. 103(a). 

10. Claim 4 is rejected under 35 U.S.C. 103(a) as being unpatentable over Kelley et al. (U.S. Patent No. 
6,000,033) as applied above in claims 1-3, further in view of Himmel et al. (U.S. Patent No. 6,037,934). 

As per claim 4, Kelley et al. discloses a method as applied above in claim 1 . 

Kelley et al. further discloses the at least one of the pages in the set comprises the password 
restriction control information that specifies the address of the domain and the restriction of the password 
use to within the domain (e.g. col. 6, line 45 - col. 7, line 16). Kelley et al. does not expressly disclose 
saving the address of the domain and saving an indication that password use is to be restricted for all the 
pages in the domain. 

However, this well known feature is disclosed in Himmel et al. "...using a plurality of bookmark 
sets... The creation of as well as other actions on a bookmark set is associated with one or more 



Application/Control Number: 10/798,909 Page 7 

Art Unit: 2135 

passwords" - e.g. abstract, "...Those password protected may be marked by some indicia, e.g., an icon or 
coloration... If there is password protection, the user is prompted for the password..." - e.g. col. 8, lines 54 - 
63, "...In step 163, the current page is saved as a bookmark in response to a user action. ..e.g. selection of 
"add to bookmark set" option..." - e.g. col. 8, line 64 - col. 9, line 10). It would have been obvious to a 
person with ordinary skill in the art to combine Himmel et al.'s saving the address of the domain and saving 
an indication that password use is to be restricted for all the pages in the domain with Kelley et al.'s 
method motivated by to provide one useful means of returning to a favorite URL, by the creation of user 
stored "bookmarks" in the browser (e.g. Himmel et al., col. 1, lines 53-60) and access control by precluding 
an unprivileged user from unlimited browsing outside the active set (e.g. Himmel et al., col. 2, lines 29-34 
and col. 7, lines 13-24). 

Conclusion 

1 1 . The prior art made of record and not relied upon is considered pertinent to applicant's disclosure. 
(See PTO - 892) 

Any inquiry concerning this communication or earlier communications from the examiner should be 
directed to APRIL Y. SHAN whose telephone number is (571 )270-1014. The examiner can normally be 
reached on Monday - Friday, 8:00 a.m. - 5:00 p.m., EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, Kim Y. 
Vu can be reached on (571 ) 272-3859. The fax phone number for the organization where this application 
or proceeding is assigned is 571-273-8300. 
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Information regarding tlie status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) 
at 866-217-9197 (toll-free). If you would like assistance from a USPTO Customer Service Representative 
or access to the automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272- 
1000. 



/April Y Shan/ 
Examiner, Art Unit 2135 
/KIMYEN VU/ 

Supervisory Patent Examiner, Art Unit 2135 



